1 /*- 2 * Copyright (c) 2015-2016 Yandex LLC 3 * Copyright (c) 2015-2016 Andrey V. Elsukov <ae@FreeBSD.org> 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 2. Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in the 14 * documentation and/or other materials provided with the distribution. 15 * 16 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 17 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 18 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 19 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 20 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 21 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 22 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 23 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 24 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 25 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 26 * 27 * $FreeBSD$ 28 */ 29 30 #ifndef _IP_FW_NAT64_H_ 31 #define _IP_FW_NAT64_H_ 32 33 #define DPRINTF(mask, fmt, ...) \ 34 if (nat64_debug & (mask)) \ 35 printf("NAT64: %s: " fmt "\n", __func__, ## __VA_ARGS__) 36 #define DP_GENERIC 0x0001 37 #define DP_OBJ 0x0002 38 #define DP_JQUEUE 0x0004 39 #define DP_STATE 0x0008 40 #define DP_DROPS 0x0010 41 #define DP_ALL 0xFFFF 42 extern int nat64_debug; 43 44 #if 0 45 #define NAT64NOINLINE __noinline 46 #else 47 #define NAT64NOINLINE 48 #endif 49 50 int nat64stl_init(struct ip_fw_chain *ch, int first); 51 void nat64stl_uninit(struct ip_fw_chain *ch, int last); 52 int nat64lsn_init(struct ip_fw_chain *ch, int first); 53 void nat64lsn_uninit(struct ip_fw_chain *ch, int last); 54 55 struct ip_fw_nat64_stats { 56 counter_u64_t opcnt64; /* 6to4 of packets translated */ 57 counter_u64_t opcnt46; /* 4to6 of packets translated */ 58 counter_u64_t ofrags; /* number of fragments generated */ 59 counter_u64_t ifrags; /* number of fragments received */ 60 counter_u64_t oerrors; /* number of output errors */ 61 counter_u64_t noroute4; 62 counter_u64_t noroute6; 63 counter_u64_t nomatch4; /* No addr/port match */ 64 counter_u64_t noproto; /* Protocol not supported */ 65 counter_u64_t nomem; /* mbufs allocation failed */ 66 counter_u64_t dropped; /* number of packets silently 67 * dropped due to some errors/ 68 * unsupported/etc. 69 */ 70 71 counter_u64_t jrequests; /* number of jobs requests queued */ 72 counter_u64_t jcalls; /* number of jobs handler calls */ 73 counter_u64_t jhostsreq; /* number of hosts requests */ 74 counter_u64_t jportreq; 75 counter_u64_t jhostfails; 76 counter_u64_t jportfails; 77 counter_u64_t jmaxlen; 78 counter_u64_t jnomem; 79 counter_u64_t jreinjected; 80 81 counter_u64_t screated; 82 counter_u64_t sdeleted; 83 counter_u64_t spgcreated; 84 counter_u64_t spgdeleted; 85 }; 86 87 #define IPFW_NAT64_VERSION 1 88 #define NAT64STATS (sizeof(struct ip_fw_nat64_stats) / sizeof(uint64_t)) 89 typedef struct _nat64_stats_block { 90 counter_u64_t stats[NAT64STATS]; 91 } nat64_stats_block; 92 #define NAT64STAT_ADD(s, f, v) \ 93 counter_u64_add((s)->stats[ \ 94 offsetof(struct ip_fw_nat64_stats, f) / sizeof(uint64_t)], (v)) 95 #define NAT64STAT_INC(s, f) NAT64STAT_ADD(s, f, 1) 96 #define NAT64STAT_FETCH(s, f) \ 97 counter_u64_fetch((s)->stats[ \ 98 offsetof(struct ip_fw_nat64_stats, f) / sizeof(uint64_t)]) 99 100 #define L3HDR(_ip, _t) ((_t)((u_int32_t *)(_ip) + (_ip)->ip_hl)) 101 #define TCP(p) ((struct tcphdr *)(p)) 102 #define UDP(p) ((struct udphdr *)(p)) 103 #define ICMP(p) ((struct icmphdr *)(p)) 104 #define ICMP6(p) ((struct icmp6_hdr *)(p)) 105 106 #define NAT64SKIP 0 107 #define NAT64RETURN 1 108 #define NAT64MFREE -1 109 110 /* Well-known prefix 64:ff9b::/96 */ 111 #define IPV6_ADDR_INT32_WKPFX htonl(0x64ff9b) 112 #define IN6_IS_ADDR_WKPFX(a) \ 113 ((a)->s6_addr32[0] == IPV6_ADDR_INT32_WKPFX && \ 114 (a)->s6_addr32[1] == 0 && (a)->s6_addr32[2] == 0) 115 116 #endif 117 118